Re: SOI QUESTIONS: 2.3 Authentication styles

[Uri Blumenthal <uri@bell-labs.com>]

On Thursday 20 June 2002 11:18, Theodore Ts'o wrote:
> > I strongly disagree with the last statement, and consider it
> > technically incorrect. Remote access does not add perceptible
> > overhead (unless you want to first retrieve your PK and then run a
> > "normal" key exchange, but leave out how practical it is. Suffeces
> > to say that "legacy auth" today fits well enough into the standard
> > IKE).
>
> The overhead I was referring to here is protocol complexity overhead
> and implementation size overhead.  

My point exactly: there is no perceptible extra protocol complexity for 
adding "legacy auth". Neither cryptographic, nor protocol-wise.
Perhaps, configuration-wise...
-- 
Regards,
Uri-David
-=-=-<>-=-=-
<Disclaimer>